MAL-2025-40571 Malicious code in yoeman-generator (npm)

The package yoeman-generator was found to contain malicious code...

generator-anyms-ms (>=1.0.7, <=2.0.4), generator-diy (1.0.0) +1 more potentially affected by unknown CVE via yoeman-generator (0.0.1-security)

yoeman-generator NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on yoeman-generator and may be impacted: - generator-anyms-ms =1.0.7, =2.0.4 - generator-diy 1.0.0 - generator-owngen 1.0.0 Source cves: unknown CVE Source advisor...

Malicious code in yoeman-generator (npm)

The package yoeman-generator was found to contain malicious code...

PT-2020-21266

Name of the Vulnerable Software and Affected Versions yoeman-generator version 2.0.2 Description The issue concerns malicious code in the preinstall script of the package. This malware is designed to exploit users who make typos when installing modules. Upon installation, it downloads a file from...